@warmdrift/kgauto-compiler 2.0.0-alpha.80 → 2.0.0-alpha.82

package/dist/{chunk-CIBHU67M.mjs → chunk-L246YOV7.mjs}

@@ -1,8 +1,19 @@
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.80";
+var LIBRARY_VERSION = "2.0.0-alpha.82";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
+var KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+var KEY_FINGERPRINT_LENGTH = 12;
+async function keyFingerprint(key) {
+  const trimmed = key?.trim();
+  if (!trimmed) return void 0;
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) return void 0;
+  const bytes = new TextEncoder().encode(KEY_FINGERPRINT_DOMAIN + trimmed);
+  const digest = await subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, KEY_FINGERPRINT_LENGTH);
+}
 function jsonResponse(status, body) {
   return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
 }
@@ -104,11 +115,13 @@ function createKeyHealthRoute(config) {
         detail: "key_absent"
       };
     }
+    const fingerprint = await keyFingerprint(key);
     const base = {
       provider: spec.provider,
       env: envName,
       present: true,
-      valid: null
+      valid: null,
+      ...fingerprint ? { key_fingerprint: fingerprint } : {}
     };
     const { url, headers } = spec.buildRequest(key);
     const started = Date.now();
@@ -199,5 +212,8 @@ function createKeyHealthRoute(config) {
 
 export {
   LIBRARY_VERSION,
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  keyFingerprint,
   createKeyHealthRoute
 };

package/dist/{chunk-PMTT4H5W.mjs → chunk-XPD4I3Q5.mjs}

@@ -412,9 +412,15 @@ var COST_RANKING_REFERENCE_SHAPE = {
   inputTokens: 4e3,
   outputTokens: 250
 };
-function estimateChainCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+function estimateModelCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile) || typeof profile.costInputPer1m !== "number" || typeof profile.costOutputPer1m !== "number") {
+    throw new TypeError(
+      `estimateModelCostUsd: expected a single ModelProfile, got ${Array.isArray(profile) ? "an array (a chain? map over it)" : typeof profile}. For a chain: chain.map((id) => estimateModelCostUsd(getProfile(id))).`
+    );
+  }
   return shape.inputTokens / 1e6 * profile.costInputPer1m + shape.outputTokens / 1e6 * profile.costOutputPer1m;
 }
+var estimateChainCostUsd = estimateModelCostUsd;
 function buildCostOrderedChain(archetype) {
   return allProfiles().filter((p) => p.status === "current").filter(
     (p) => getArchetypePerfScore(p.id, archetype).score >= ARCHETYPE_FLOOR_DEFAULT
@@ -811,6 +817,7 @@ export {
   isSameModelRetryEnabledFromEnv,
   loadChainsFromBrain,
   COST_RANKING_REFERENCE_SHAPE,
+  estimateModelCostUsd,
   estimateChainCostUsd,
   chainProviderSpread,
   getDefaultFallbackChain,

package/dist/glassbox/index.d.mts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-DpcAMmk-.mjs';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-DpcAMmk-.mjs';
-import '../ir-BFwWhj2s.mjs';
+import { G as GlassboxEvent } from '../types-CRXaR7nJ.mjs';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-CRXaR7nJ.mjs';
+import '../ir-D4S9R816.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox/index.d.ts

@@ -1,6 +1,6 @@
-import { G as GlassboxEvent } from '../types-B4kz3Vs0.js';
-export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-B4kz3Vs0.js';
-import '../ir-DZKS1tI7.js';
+import { G as GlassboxEvent } from '../types-CAs9-0S4.js';
+export { A as AdvisoryFiredData, C as CompileDoneData, a as CompileStartData, E as ExecuteAttemptData, b as ExecuteSuccessData, F as FallbackWalkedData, c as GLASSBOX_STREAM_TTL_MS, d as GlassboxEventKind, e as GlassboxPubSub } from '../types-CAs9-0S4.js';
+import '../ir-Cx9hJj0B.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/format.d.mts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-hjzSWxtv.mjs';
-import '../ir-BFwWhj2s.mjs';
+import { T as TraceHealth } from '../types-DHi4FcUu.mjs';
+import '../ir-D4S9R816.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/format.d.ts

@@ -1,5 +1,5 @@
-import { T as TraceHealth } from '../types-D_fLt_Xv.js';
-import '../ir-DZKS1tI7.js';
+import { T as TraceHealth } from '../types-Cvd6kRNv.js';
+import '../ir-Cx9hJj0B.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.d.mts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-DpcAMmk-.mjs';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-hjzSWxtv.mjs';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-hjzSWxtv.mjs';
-import '../ir-BFwWhj2s.mjs';
+import { G as GlassboxEvent } from '../types-CRXaR7nJ.mjs';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-DHi4FcUu.mjs';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-DHi4FcUu.mjs';
+import '../ir-D4S9R816.mjs';
 import '../dialect.mjs';
 
 /**

package/dist/glassbox-routes/index.d.ts

@@ -1,7 +1,7 @@
-import { G as GlassboxEvent } from '../types-B4kz3Vs0.js';
-import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-D_fLt_Xv.js';
-export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-D_fLt_Xv.js';
-import '../ir-DZKS1tI7.js';
+import { G as GlassboxEvent } from '../types-CAs9-0S4.js';
+import { a as TraceDetail, b as TraceSummary, c as TraceCounterfactual } from '../types-Cvd6kRNv.js';
+export { A as AdvisoryRecord, T as TraceHealth, d as TraceSectionRewrite } from '../types-Cvd6kRNv.js';
+import '../ir-Cx9hJj0B.js';
 import '../dialect.js';
 
 /**

package/dist/glassbox-routes/index.js

@@ -1956,9 +1956,15 @@ var COST_RANKING_REFERENCE_SHAPE = {
   inputTokens: 4e3,
   outputTokens: 250
 };
-function estimateChainCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+function estimateModelCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile) || typeof profile.costInputPer1m !== "number" || typeof profile.costOutputPer1m !== "number") {
+    throw new TypeError(
+      `estimateModelCostUsd: expected a single ModelProfile, got ${Array.isArray(profile) ? "an array (a chain? map over it)" : typeof profile}. For a chain: chain.map((id) => estimateModelCostUsd(getProfile(id))).`
+    );
+  }
   return shape.inputTokens / 1e6 * profile.costInputPer1m + shape.outputTokens / 1e6 * profile.costOutputPer1m;
 }
+var estimateChainCostUsd = estimateModelCostUsd;
 function buildCostOrderedChain(archetype) {
   return allProfiles().filter((p) => p.status === "current").filter(
     (p) => getArchetypePerfScore(p.id, archetype).score >= ARCHETYPE_FLOOR_DEFAULT

package/dist/glassbox-routes/index.mjs

@@ -1,7 +1,7 @@
 import {
   ARCHETYPE_FLOOR_DEFAULT,
   getDefaultFallbackChain
-} from "../chunk-PMTT4H5W.mjs";
+} from "../chunk-XPD4I3Q5.mjs";
 import {
   tryGetProfile
 } from "../chunk-VVRDFE6T.mjs";

package/dist/glassbox-routes/react/index.d.mts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-hjzSWxtv.mjs';
-import '../../ir-BFwWhj2s.mjs';
+import { a as TraceDetail } from '../../types-DHi4FcUu.mjs';
+import '../../ir-D4S9R816.mjs';
 import '../../dialect.mjs';
 
 /**

package/dist/glassbox-routes/react/index.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
-import { a as TraceDetail } from '../../types-D_fLt_Xv.js';
-import '../../ir-DZKS1tI7.js';
+import { a as TraceDetail } from '../../types-Cvd6kRNv.js';
+import '../../ir-Cx9hJj0B.js';
 import '../../dialect.js';
 
 /**

package/dist/index.d.mts

@@ -1,9 +1,9 @@
-import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-BFwWhj2s.mjs';
-export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as hasMutation, K as mutationId, L as parseGoldenCaptureRate, Q as resolveGoldenCaptureRate, U as shouldCaptureGolden } from './ir-BFwWhj2s.mjs';
+import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-D4S9R816.mjs';
+export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as hasMutation, K as mutationId, L as parseGoldenCaptureRate, Q as resolveGoldenCaptureRate, U as shouldCaptureGolden } from './ir-D4S9R816.mjs';
 import { ModelProfile, ArchetypeConvention } from './profiles.mjs';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.mjs';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.mjs';
-export { KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute } from './key-health.mjs';
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute, keyFingerprint } from './key-health.mjs';
 import { IntentArchetypeName, OutputMode } from './dialect.mjs';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.mjs';
 
@@ -1146,7 +1146,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.80";
+declare const LIBRARY_VERSION = "2.0.0-alpha.82";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -2540,10 +2540,16 @@ declare const COST_RANKING_REFERENCE_SHAPE: {
  * consumer-side code share ONE derivation of "what does this model cost
  * here" — two independent derivations of one concept will drift (s75).
  */
-declare function estimateChainCostUsd(profile: ModelProfile, shape?: {
+declare function estimateModelCostUsd(profile: ModelProfile, shape?: {
     inputTokens: number;
     outputTokens: number;
 }): number;
+/**
+ * @deprecated alpha.81 — renamed to {@link estimateModelCostUsd}; it takes a
+ * single MODEL, not a chain. Preserved because alpha.80 shipped this name and
+ * a consumer adopted it within hours. Identical behavior.
+ */
+declare const estimateChainCostUsd: typeof estimateModelCostUsd;
 /**
  * How many distinct providers a chain spans. `1` means every fallback shares
  * one provider's fate — the chain buys you retries, not outage independence.
@@ -3754,4 +3760,4 @@ declare function planDecomposition(args: PlanDecompositionArgs): DecompositionPl
  */
 declare function compile(ir: PromptIR, opts?: CompileOptions): CompileResult;
 
-export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };
+export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, estimateModelCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };

package/dist/index.d.ts

@@ -1,9 +1,9 @@
-import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-DZKS1tI7.js';
-export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as hasMutation, K as mutationId, L as parseGoldenCaptureRate, Q as resolveGoldenCaptureRate, U as shouldCaptureGolden } from './ir-DZKS1tI7.js';
+import { C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, S as SystemModelMessage, e as CompileResult, B as BestPracticeAdvisory, F as FallbackReason, f as SectionRewrite, R as RecordInput, g as RecordOutcomeInput, O as OutcomeResult, h as OracleScore, i as Adapter, j as PerAxisMetrics, k as Provider, l as ChainEntry, G as Grounding } from './ir-Cx9hJj0B.js';
+export { m as CallAttempt, n as CallError, o as ChainModelEntry, p as ChainWithGrounding, q as Constraints, E as EffortLevel, r as GoldenCaptureOptions, H as HistoryCachePolicy, I as IntentDeclaration, M as Message, s as MutationApplied, t as NormalizedTokens, u as OutcomeKind, v as PerAxisMetricsByModel, w as PromptSection, x as SectionKind, y as ShadowProbeConfig, T as ToolCall, z as ToolDefinition, D as captureGoldenIr, J as hasMutation, K as mutationId, L as parseGoldenCaptureRate, Q as resolveGoldenCaptureRate, U as shouldCaptureGolden } from './ir-Cx9hJj0B.js';
 import { ModelProfile, ArchetypeConvention } from './profiles.js';
 export { ALIASES, CacheStrategy, CliffRule, LATENCY_TIER_MS, LatencyTier, LoweringSpec, RecoveryRule, StructuredOutputCapability, SystemPromptMode, allProfiles, getProfile, latencyTierOf, profilesByProvider, tryGetProfile } from './profiles.js';
 export { BrainForwardConfig, BrainForwardRoutes, createBrainForwardRoutes } from './brain-proxy.js';
-export { KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute } from './key-health.js';
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, KeyHealthConfig, KeyHealthProvider, KeyHealthResponseBody, KeyHealthResult, KeyHealthRoute, createKeyHealthRoute, keyFingerprint } from './key-health.js';
 import { IntentArchetypeName, OutputMode } from './dialect.js';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.js';
 
@@ -1146,7 +1146,7 @@ declare function runStrategyEvalWithAttribution(opts: Omit<GoldenEvalOptions, 'a
  * guard in `tests/version.test.ts` fails the suite (and therefore
  * `prepublishOnly`) when they diverge — a stale constant cannot reach npm.
  */
-declare const LIBRARY_VERSION = "2.0.0-alpha.80";
+declare const LIBRARY_VERSION = "2.0.0-alpha.82";
 
 /**
  * Oracle contract — how an app tells the brain whether a response was good.
@@ -2540,10 +2540,16 @@ declare const COST_RANKING_REFERENCE_SHAPE: {
  * consumer-side code share ONE derivation of "what does this model cost
  * here" — two independent derivations of one concept will drift (s75).
  */
-declare function estimateChainCostUsd(profile: ModelProfile, shape?: {
+declare function estimateModelCostUsd(profile: ModelProfile, shape?: {
     inputTokens: number;
     outputTokens: number;
 }): number;
+/**
+ * @deprecated alpha.81 — renamed to {@link estimateModelCostUsd}; it takes a
+ * single MODEL, not a chain. Preserved because alpha.80 shipped this name and
+ * a consumer adopted it within hours. Identical behavior.
+ */
+declare const estimateChainCostUsd: typeof estimateModelCostUsd;
 /**
  * How many distinct providers a chain spans. `1` means every fallback shares
  * one provider's fate — the chain buys you retries, not outage independence.
@@ -3754,4 +3760,4 @@ declare function planDecomposition(args: PlanDecompositionArgs): DecompositionPl
  */
 declare function compile(ir: PromptIR, opts?: CompileOptions): CompileResult;
 
-export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };
+export { ABSOLUTE_FLOOR, type AISDKConvertedMessage, ARCHETYPE_FAMILY_FITS, ARCHETYPE_FLOOR_DEFAULT, type ActionableAdvisory, Adapter, type AdvisoryResolutionSource, type AdvisorySeverity, type AdvisoryStatus, type AdvisorySuggestedFix, ApiKeys, type AppOracle, type ApplySectionRewritesArgs, type ApplySectionRewritesResult, ArchetypeConvention, type ArchetypeFamilyFit, type ArchetypePerfMap, type ArchetypePerfNMap, type ArchetypePerfScoreResult, type AttachCacheControlResult, BRAIN_READ_ENV_NAMES, BestPracticeAdvisory, type BrainConfig, type BrainDeadLetterEntry, type BrainHealthSnapshot, type BrainQueryConfig, type BrainReadEnv, COACH_CFG, COST_RANKING_REFERENCE_SHAPE, CallOptions, CallResult, ChainEntry, type CompatibilityIntent, type CompileForAISDKv6Result, type CompileOptions, CompilePolicy, CompileResult, CompiledRequest, type CreateDelegateOpts, DECOMPOSITION_TEMPLATES, DECOMPOSITION_TEMPLATES_VERSION, DEFAULT_FINDINGS_ENDPOINT, DEFAULT_MEASURED_FAILURE_ENDPOINT, DEFAULT_PROMOTIONS_ENDPOINT, DELEGATE_TOOL_DEFINITION, DISCIPLINE_GATES_V1_ALT_HEADER, type DecompositionPlan, type DecompositionStep, type DecompositionTemplate, type DelegateHandle, type DelegateRefusalReason, type DelegateResult, type DelegateToolArgs, type ExclusionFindingRow, type ExclusionResolutionSource, type ExecuteErr, type ExecuteOk, type ExecuteOptions, type ExecuteResult, type ExecutorCandidate, type FallbackPosture, FallbackReason, FamilyResolutionError, type GetActionableAdvisoriesOptions, type GetApplicablePromotionOpts, type GetDefaultFallbackChainOpts, type GetMeasuredFailureOpts, type GetPerAxisMetricsOpts, type GetRecommendedPrimaryOptions, type GoldenEvalAxis, type GoldenEvalCase, type GoldenEvalOptions, type GoldenEvalRunResult, type GoldenEvalStrategyId, type GoldenIrRecordInput, Grounding, IntentArchetypeName, JUDGE_RUBRICS, LIBRARY_VERSION, type LLMJudgeOptions, MEASURED_FAILURE_CFG, MEASURED_GROUNDING_MIN_N, type MarkAdvisoryResolvedOptions, type MarkExclusionFindingHandledOptions, type MarkPromoteReadyHandledOptions, type MeasuredFailureRuntime, type MeasuredFailureVerdict, type ModelBrainRow, type ModelCompatibility, ModelProfile, NormalizedResponse, type OracleContext, OracleScore, type OutcomePayload, OutcomeResult, OutputMode, PRODUCER_OWNED_RULE_CODES, PROVIDER_ENV_KEYS, PerAxisMetrics, type PlannedStep, type PricingRow, type ProbeShadowOptions, type ProbeShadowServed, type ProfileToRowOptions, type PromoteReadyFindingRow, type PromoteReadyResolution, type PromotionRow, type PromotionsRuntime, PromptIR, Provider, ProviderOverrides, type ProviderReachability, ROLLBACK_SUPPRESSION_WINDOW_DAYS, RULE_DISCIPLINE_GATES_V1, RULE_DISCIPLINE_GATES_V1_STRUCTURED, RULE_SEQUENTIAL_TOOL_CLIFF, type ReachabilityOpts, RecordInput, RecordOutcomeInput, type RunAdvisorPhase2Context, STRATEGY_AUTHORSHIP_LIMITATION, SectionRewrite, type ShadowProbeRecordInput, type StrategyAttribution, type StrategyAttributionResult, type StrategyOutcome, type SupportedProvider, type SurfaceFailureRow, type SurfaceStats, SystemModelMessage, TRANSLATOR_FLOOR, _testResetMeasuredFailure, _testResetPromotions, _testWaitForMeasuredFailureRefresh, _testWaitForPromotionsRefresh, altGatesBlockFor, applyArchetypeConvention, applySectionRewrites, attachCacheControlToStreamTextInput, awaitMeasuredFailureReady, brainHealth, buildGoldenIrRow, buildLLMJudge, buildPairwiseJudgePrompt, buildShadowProbeRow, call, chainProviderSpread, classifyStrategyOutcome, clearBrain, combineOrderSwappedVerdicts, compile, compileForAISDKv6, configureBrain, configureMeasuredFailureBrain, configurePromotionsBrain, countTokens, createDelegate, deriveFamilyFromModelId, deriveOwnership, estimateChainCostUsd, estimateModelCostUsd, execute, findBetterFit, flushBrainDeadLetter, getActionableAdvisories, getAllStarterChains, getAllStarterChainsWithGrounding, getApplicablePromotion, getArchetypePerfScore, getDefaultFallbackChain, getDefaultFallbackChainWithGrounding, getMeasuredFailureVerdict, getModelCompatibility, getPerAxisMetrics, getReachabilityDiagnostic, getRecentRollback, getRecommendedPrimary, getSequentialStarterChain, getSequentialStarterChainWithGrounding, getStaleExclusionFindings, getStarterChain, getStarterChainWithGrounding, isAutoPromoteEnabledFromEnv, isBrainQueryActiveFor, isBrainSync, isDelegateEnabledFromEnv, isExclusionFindingsBrainActive, isMeasuredFailureBrainActive, isMeasuredFailureGateEnabledFromEnv, isModelReachable, isPromotionsBrainActive, isProviderReachable, judgeMeasuredFailure, loadAliasesFromBrain, loadArchetypePerfFromBrain, loadArchetypePerfNFromBrain, loadChainsFromBrain, loadModelsFromBrain, loadPricingFromBrain, mapMeasuredFailureRows, markAdvisoryResolved, markExclusionFindingHandled, markPromoteReadyHandled, parseJudgeVerdict, peekBrainDeadLetter, planDecomposition, prefetchMeasuredFailure, probeShadow, profileToRow, readBrainReadEnv, record, recordGoldenIr, recordOutcome, recordShadowProbe, renderIrForJudge, resetTokenizer, resolveConventionsForProfile, resolvePricingAt, resolveProviderKey, rubricFor, runAdvisor, runGoldenEval, runStrategyEvalWithAttribution, setTokenizer, wilsonLowerBound, withAltDisciplineContract, withDisciplineContract };

package/dist/index.js

@@ -40,6 +40,8 @@ __export(index_exports, {
   FamilyResolutionError: () => FamilyResolutionError,
   INTENT_ARCHETYPES: () => INTENT_ARCHETYPES,
   JUDGE_RUBRICS: () => JUDGE_RUBRICS,
+  KEY_FINGERPRINT_DOMAIN: () => KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH: () => KEY_FINGERPRINT_LENGTH,
   LATENCY_TIER_MS: () => LATENCY_TIER_MS,
   LIBRARY_VERSION: () => LIBRARY_VERSION,
   MEASURED_FAILURE_CFG: () => MEASURED_FAILURE_CFG,
@@ -88,6 +90,7 @@ __export(index_exports, {
   deriveFamilyFromModelId: () => deriveFamilyFromModelId,
   deriveOwnership: () => deriveOwnership,
   estimateChainCostUsd: () => estimateChainCostUsd,
+  estimateModelCostUsd: () => estimateModelCostUsd,
   execute: () => execute,
   findBetterFit: () => findBetterFit,
   flushBrainDeadLetter: () => flushBrainDeadLetter,
@@ -124,6 +127,7 @@ __export(index_exports, {
   isPromotionsBrainActive: () => isPromotionsBrainActive,
   isProviderReachable: () => isProviderReachable,
   judgeMeasuredFailure: () => judgeMeasuredFailure,
+  keyFingerprint: () => keyFingerprint,
   latencyTierOf: () => latencyTierOf,
   learningKey: () => learningKey,
   loadAliasesFromBrain: () => loadAliasesFromBrain,
@@ -3868,9 +3872,15 @@ var COST_RANKING_REFERENCE_SHAPE = {
   inputTokens: 4e3,
   outputTokens: 250
 };
-function estimateChainCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+function estimateModelCostUsd(profile, shape = COST_RANKING_REFERENCE_SHAPE) {
+  if (!profile || typeof profile !== "object" || Array.isArray(profile) || typeof profile.costInputPer1m !== "number" || typeof profile.costOutputPer1m !== "number") {
+    throw new TypeError(
+      `estimateModelCostUsd: expected a single ModelProfile, got ${Array.isArray(profile) ? "an array (a chain? map over it)" : typeof profile}. For a chain: chain.map((id) => estimateModelCostUsd(getProfile(id))).`
+    );
+  }
   return shape.inputTokens / 1e6 * profile.costInputPer1m + shape.outputTokens / 1e6 * profile.costOutputPer1m;
 }
+var estimateChainCostUsd = estimateModelCostUsd;
 function buildCostOrderedChain(archetype) {
   return allProfiles().filter((p) => p.status === "current").filter(
     (p) => getArchetypePerfScore(p.id, archetype).score >= ARCHETYPE_FLOOR_DEFAULT
@@ -5176,6 +5186,20 @@ function detectSingleModelArray(ir, policy) {
     }
   ];
 }
+function suppressedRecommendationReason(ir, archetype, altProfile) {
+  if (getMeasuredFailureVerdict({ appId: ir.appId, archetype, model: altProfile.id })?.gated === true) {
+    return "measured-failure-gate";
+  }
+  if (ir.constraints?.structuredOutput && effectiveConventions(altProfile).some(
+    (c) => c.archetype === archetype && c.structuredOutputHint === "avoid"
+  )) {
+    return "schema-weakness-convention";
+  }
+  if (getRecentRollback({ appId: ir.appId, archetype, model: altProfile.id }) !== void 0) {
+    return "recent-rollback";
+  }
+  return void 0;
+}
 function openPostureRemedyClause(archetype, recommended, resolveProfile) {
   const openChain = getDefaultFallbackChain({ archetype, posture: "open" });
   const openPrimaryId = openChain[0];
@@ -5213,25 +5237,7 @@ function detectCostMismatchedArchetype(ir, profile, phase2) {
     if (altScore.score < QUALITY_FLOOR_FOR_RECOMMENDATION) continue;
     if (altScore.score < chosenScore.score) continue;
     if (altProfile.costInputPer1m >= profile.costInputPer1m) continue;
-    if (getMeasuredFailureVerdict({
-      appId: ir.appId,
-      archetype,
-      model: altProfile.id
-    })?.gated === true) {
-      continue;
-    }
-    if (ir.constraints?.structuredOutput && effectiveConventions(altProfile).some(
-      (c) => c.archetype === archetype && c.structuredOutputHint === "avoid"
-    )) {
-      continue;
-    }
-    if (getRecentRollback({
-      appId: ir.appId,
-      archetype,
-      model: altProfile.id
-    }) !== void 0) {
-      continue;
-    }
+    if (suppressedRecommendationReason(ir, archetype, altProfile)) continue;
     if (!bestAlt || altScore.score > bestAlt.score.score || altScore.score === bestAlt.score.score && altProfile.costInputPer1m < bestAlt.profile.costInputPer1m) {
       bestAlt = { id: altId, profile: altProfile, score: altScore };
     }
@@ -5289,6 +5295,7 @@ function detectTierDown(ir, profile, phase2) {
     if (altScore.score < QUALITY_FLOOR_FOR_RECOMMENDATION) continue;
     if (altScore.score < chosenScore.score) continue;
     if (altProfile.costInputPer1m > chosenCost * TIER_DOWN_COST_RATIO) continue;
+    if (suppressedRecommendationReason(ir, archetype, altProfile)) continue;
     if (!bestAlt || altProfile.costInputPer1m < bestAlt.profile.costInputPer1m || altProfile.costInputPer1m === bestAlt.profile.costInputPer1m && altScore.score > bestAlt.score.score) {
       bestAlt = { id: altId, profile: altProfile, score: altScore };
     }
@@ -5335,7 +5342,18 @@ function detectArchetypePerfFloorBreach(ir, profile) {
       // library pick" endorsement could land on a materially pricier
       // primary. The floor recommendation stands; the axis is now named,
       // and the cost-ordered variant is offered alongside it.
-      suggestion: `Swap to a model whose archetypePerf for ${ir.intent.archetype} clears the floor. Use \`getModelCompatibility(candidateId, { archetype: '${ir.intent.archetype}' })\` to vet candidates, or \`getDefaultFallbackChain({ archetype: '${ir.intent.archetype}', posture: 'open' })\` for a library-picked chain that respects the floor by construction \u2014 note that chain is ordered by archetype performance, NOT cost, so it may select a pricier primary than you run today. Add \`optimizeFor: 'cost'\` for a chain that clears the same floor cheapest-first.`,
+      //
+      // alpha.82 (cc-Cairn 2026-07-29, follow-on 1): the suggestion read as
+      // advice about the ARCHETYPE when it is a fact about ONE CALL. Model
+      // selection is input-size dependent, so a rule that fires on the
+      // small-payload tail of a path whose typical case clears the floor
+      // reads as "your primary is wrong" when the accurate statement is
+      // "this call landed here." Ground truth for the wording: tt-intel's
+      // open critical is `gemini-2.5-flash-lite` (ask, 5/10) selected at
+      // ~2.1K tokens_in, while `claude-opus-5` served the same archetype at
+      // ~22K the same day — cc read the evidence set as self-contradictory
+      // precisely because the text did not say which call it described.
+      suggestion: `This fired for \`${profile.id}\`, the model selected for THIS call \u2014 selection is input-size dependent, so other calls on \`${ir.intent.archetype}\` may pick a different model that clears the floor. Swap to a model whose archetypePerf for ${ir.intent.archetype} clears the floor. Use \`getModelCompatibility(candidateId, { archetype: '${ir.intent.archetype}' })\` to vet candidates, or \`getDefaultFallbackChain({ archetype: '${ir.intent.archetype}', posture: 'open' })\` for a library-picked chain that respects the floor by construction \u2014 note that chain is ordered by archetype performance, NOT cost, so it may select a pricier primary than you run today. Add \`optimizeFor: 'cost'\` for a chain that clears the same floor cheapest-first. To stop this model being selected at all, pass \`policy.blockedModels: ['${profile.id}']\`.`,
       recommendationType: "model-swap",
       docsUrl: "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#best-practice-advisories"
     }
@@ -5834,6 +5852,9 @@ function validateFinalFit(ir, profile, tokens) {
   }
 }
 
+// src/version.ts
+var LIBRARY_VERSION = "2.0.0-alpha.82";
+
 // src/pricing-brain.ts
 function isPricingRow(x) {
   if (!x || typeof x !== "object") return false;
@@ -6407,6 +6428,12 @@ function buildAdvisoryRow(outcomeId, a) {
     outcome_id: outcomeId,
     code: a.code,
     level: a.level,
+    // alpha.81 (tt-intel s118, migration 053) — the emitting library version.
+    // A corrected rule cannot rewrite firings that are already open, so a
+    // consumer reading a stale suggestion had no way to tell it predated the
+    // fix. tt-intel spent two hours on exactly that. NULL on pre-053 rows
+    // reads as UNKNOWN; from here every firing self-identifies.
+    rule_version: LIBRARY_VERSION,
     message: a.message,
     recommendation_type: a.recommendationType ?? null,
     suggestion: a.suggestion ?? null,
@@ -6623,13 +6650,16 @@ var FAILED = /* @__PURE__ */ Symbol("parse-failed");
 
 // src/ir.ts
 function mutationId(m) {
-  return typeof m === "string" ? m : m.id;
+  if (m == null) return void 0;
+  if (typeof m === "string") return m;
+  return typeof m.id === "string" ? m.id : void 0;
 }
 function hasMutation(list, idOrPrefix) {
   if (!Array.isArray(list)) return false;
   const prefix = idOrPrefix.endsWith("*") ? idOrPrefix.slice(0, -1) : void 0;
   return list.some((m) => {
     const id = mutationId(m);
+    if (id === void 0) return false;
     return prefix !== void 0 ? id.startsWith(prefix) : id === idOrPrefix;
   });
 }
@@ -9382,11 +9412,19 @@ function createBrainForwardRoutes(config) {
   return { handle, segments: KNOWN_SEGMENTS };
 }
 
-// src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.80";
-
 // src/key-health.ts
 var JSON_HEADERS2 = { "Content-Type": "application/json" };
+var KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+var KEY_FINGERPRINT_LENGTH = 12;
+async function keyFingerprint(key) {
+  const trimmed = key?.trim();
+  if (!trimmed) return void 0;
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) return void 0;
+  const bytes = new TextEncoder().encode(KEY_FINGERPRINT_DOMAIN + trimmed);
+  const digest = await subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, KEY_FINGERPRINT_LENGTH);
+}
 function jsonResponse2(status, body) {
   return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS2 });
 }
@@ -9488,11 +9526,13 @@ function createKeyHealthRoute(config) {
         detail: "key_absent"
       };
     }
+    const fingerprint = await keyFingerprint(key);
     const base = {
       provider: spec.provider,
       env: envName,
       present: true,
-      valid: null
+      valid: null,
+      ...fingerprint ? { key_fingerprint: fingerprint } : {}
     };
     const { url, headers } = spec.buildRequest(key);
     const started = Date.now();
@@ -10440,6 +10480,8 @@ function compile2(ir, opts) {
   FamilyResolutionError,
   INTENT_ARCHETYPES,
   JUDGE_RUBRICS,
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
   LATENCY_TIER_MS,
   LIBRARY_VERSION,
   MEASURED_FAILURE_CFG,
@@ -10488,6 +10530,7 @@ function compile2(ir, opts) {
   deriveFamilyFromModelId,
   deriveOwnership,
   estimateChainCostUsd,
+  estimateModelCostUsd,
   execute,
   findBetterFit,
   flushBrainDeadLetter,
@@ -10524,6 +10567,7 @@ function compile2(ir, opts) {
   isPromotionsBrainActive,
   isProviderReachable,
   judgeMeasuredFailure,
+  keyFingerprint,
   latencyTierOf,
   learningKey,
   loadAliasesFromBrain,

package/dist/index.mjs

@@ -14,9 +14,12 @@ import {
   resolveOutputMode
 } from "./chunk-BVEXV5KC.mjs";
 import {
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
   LIBRARY_VERSION,
-  createKeyHealthRoute
-} from "./chunk-CIBHU67M.mjs";
+  createKeyHealthRoute,
+  keyFingerprint
+} from "./chunk-L246YOV7.mjs";
 import {
   ABSOLUTE_FLOOR,
   ARCHETYPE_FLOOR_DEFAULT,
@@ -29,6 +32,7 @@ import {
   createBrainQueryCache,
   ensureCrossProviderTail,
   estimateChainCostUsd,
+  estimateModelCostUsd,
   getAllStarterChains,
   getAllStarterChainsWithGrounding,
   getArchetypePerfScore,
@@ -50,7 +54,7 @@ import {
   loadChainsFromBrain,
   readBrainReadEnv,
   resolveProviderKey
-} from "./chunk-PMTT4H5W.mjs";
+} from "./chunk-XPD4I3Q5.mjs";
 import {
   ALIASES,
   LATENCY_TIER_MS,
@@ -2502,6 +2506,20 @@ function detectSingleModelArray(ir, policy) {
     }
   ];
 }
+function suppressedRecommendationReason(ir, archetype, altProfile) {
+  if (getMeasuredFailureVerdict({ appId: ir.appId, archetype, model: altProfile.id })?.gated === true) {
+    return "measured-failure-gate";
+  }
+  if (ir.constraints?.structuredOutput && effectiveConventions(altProfile).some(
+    (c) => c.archetype === archetype && c.structuredOutputHint === "avoid"
+  )) {
+    return "schema-weakness-convention";
+  }
+  if (getRecentRollback({ appId: ir.appId, archetype, model: altProfile.id }) !== void 0) {
+    return "recent-rollback";
+  }
+  return void 0;
+}
 function openPostureRemedyClause(archetype, recommended, resolveProfile) {
   const openChain = getDefaultFallbackChain({ archetype, posture: "open" });
   const openPrimaryId = openChain[0];
@@ -2539,25 +2557,7 @@ function detectCostMismatchedArchetype(ir, profile, phase2) {
     if (altScore.score < QUALITY_FLOOR_FOR_RECOMMENDATION) continue;
     if (altScore.score < chosenScore.score) continue;
     if (altProfile.costInputPer1m >= profile.costInputPer1m) continue;
-    if (getMeasuredFailureVerdict({
-      appId: ir.appId,
-      archetype,
-      model: altProfile.id
-    })?.gated === true) {
-      continue;
-    }
-    if (ir.constraints?.structuredOutput && effectiveConventions(altProfile).some(
-      (c) => c.archetype === archetype && c.structuredOutputHint === "avoid"
-    )) {
-      continue;
-    }
-    if (getRecentRollback({
-      appId: ir.appId,
-      archetype,
-      model: altProfile.id
-    }) !== void 0) {
-      continue;
-    }
+    if (suppressedRecommendationReason(ir, archetype, altProfile)) continue;
     if (!bestAlt || altScore.score > bestAlt.score.score || altScore.score === bestAlt.score.score && altProfile.costInputPer1m < bestAlt.profile.costInputPer1m) {
       bestAlt = { id: altId, profile: altProfile, score: altScore };
     }
@@ -2615,6 +2615,7 @@ function detectTierDown(ir, profile, phase2) {
     if (altScore.score < QUALITY_FLOOR_FOR_RECOMMENDATION) continue;
     if (altScore.score < chosenScore.score) continue;
     if (altProfile.costInputPer1m > chosenCost * TIER_DOWN_COST_RATIO) continue;
+    if (suppressedRecommendationReason(ir, archetype, altProfile)) continue;
     if (!bestAlt || altProfile.costInputPer1m < bestAlt.profile.costInputPer1m || altProfile.costInputPer1m === bestAlt.profile.costInputPer1m && altScore.score > bestAlt.score.score) {
       bestAlt = { id: altId, profile: altProfile, score: altScore };
     }
@@ -2661,7 +2662,18 @@ function detectArchetypePerfFloorBreach(ir, profile) {
       // library pick" endorsement could land on a materially pricier
       // primary. The floor recommendation stands; the axis is now named,
       // and the cost-ordered variant is offered alongside it.
-      suggestion: `Swap to a model whose archetypePerf for ${ir.intent.archetype} clears the floor. Use \`getModelCompatibility(candidateId, { archetype: '${ir.intent.archetype}' })\` to vet candidates, or \`getDefaultFallbackChain({ archetype: '${ir.intent.archetype}', posture: 'open' })\` for a library-picked chain that respects the floor by construction \u2014 note that chain is ordered by archetype performance, NOT cost, so it may select a pricier primary than you run today. Add \`optimizeFor: 'cost'\` for a chain that clears the same floor cheapest-first.`,
+      //
+      // alpha.82 (cc-Cairn 2026-07-29, follow-on 1): the suggestion read as
+      // advice about the ARCHETYPE when it is a fact about ONE CALL. Model
+      // selection is input-size dependent, so a rule that fires on the
+      // small-payload tail of a path whose typical case clears the floor
+      // reads as "your primary is wrong" when the accurate statement is
+      // "this call landed here." Ground truth for the wording: tt-intel's
+      // open critical is `gemini-2.5-flash-lite` (ask, 5/10) selected at
+      // ~2.1K tokens_in, while `claude-opus-5` served the same archetype at
+      // ~22K the same day — cc read the evidence set as self-contradictory
+      // precisely because the text did not say which call it described.
+      suggestion: `This fired for \`${profile.id}\`, the model selected for THIS call \u2014 selection is input-size dependent, so other calls on \`${ir.intent.archetype}\` may pick a different model that clears the floor. Swap to a model whose archetypePerf for ${ir.intent.archetype} clears the floor. Use \`getModelCompatibility(candidateId, { archetype: '${ir.intent.archetype}' })\` to vet candidates, or \`getDefaultFallbackChain({ archetype: '${ir.intent.archetype}', posture: 'open' })\` for a library-picked chain that respects the floor by construction \u2014 note that chain is ordered by archetype performance, NOT cost, so it may select a pricier primary than you run today. Add \`optimizeFor: 'cost'\` for a chain that clears the same floor cheapest-first. To stop this model being selected at all, pass \`policy.blockedModels: ['${profile.id}']\`.`,
       recommendationType: "model-swap",
       docsUrl: "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#best-practice-advisories"
     }
@@ -3733,6 +3745,12 @@ function buildAdvisoryRow(outcomeId, a) {
     outcome_id: outcomeId,
     code: a.code,
     level: a.level,
+    // alpha.81 (tt-intel s118, migration 053) — the emitting library version.
+    // A corrected rule cannot rewrite firings that are already open, so a
+    // consumer reading a stale suggestion had no way to tell it predated the
+    // fix. tt-intel spent two hours on exactly that. NULL on pre-053 rows
+    // reads as UNKNOWN; from here every firing self-identifies.
+    rule_version: LIBRARY_VERSION,
     message: a.message,
     recommendation_type: a.recommendationType ?? null,
     suggestion: a.suggestion ?? null,
@@ -3949,13 +3967,16 @@ var FAILED = /* @__PURE__ */ Symbol("parse-failed");
 
 // src/ir.ts
 function mutationId(m) {
-  return typeof m === "string" ? m : m.id;
+  if (m == null) return void 0;
+  if (typeof m === "string") return m;
+  return typeof m.id === "string" ? m.id : void 0;
 }
 function hasMutation(list, idOrPrefix) {
   if (!Array.isArray(list)) return false;
   const prefix = idOrPrefix.endsWith("*") ? idOrPrefix.slice(0, -1) : void 0;
   return list.some((m) => {
     const id = mutationId(m);
+    if (id === void 0) return false;
     return prefix !== void 0 ? id.startsWith(prefix) : id === idOrPrefix;
   });
 }
@@ -7099,6 +7120,8 @@ export {
   FamilyResolutionError,
   INTENT_ARCHETYPES,
   JUDGE_RUBRICS,
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
   LATENCY_TIER_MS,
   LIBRARY_VERSION,
   MEASURED_FAILURE_CFG,
@@ -7147,6 +7170,7 @@ export {
   deriveFamilyFromModelId,
   deriveOwnership,
   estimateChainCostUsd,
+  estimateModelCostUsd,
   execute,
   findBetterFit,
   flushBrainDeadLetter,
@@ -7183,6 +7207,7 @@ export {
   isPromotionsBrainActive,
   isProviderReachable,
   judgeMeasuredFailure,
+  keyFingerprint,
   latencyTierOf,
   learningKey,
   loadAliasesFromBrain,

package/dist/{ir-DZKS1tI7.d.ts → ir-Cx9hJj0B.d.ts}

@@ -454,7 +454,7 @@ type MutationApplied = {
  * type can change without breaking a live consumer, so the fix is an
  * accessor that is correct on both.
  */
-declare function mutationId(m: string | MutationApplied): string;
+declare function mutationId(m: string | MutationApplied | null | undefined): string | undefined;
 /**
  * alpha.78 — does any mutation in the list match `idOrPrefix` (exact id, or
  * prefix when it ends with `*`)? Works on both `mutationsApplied` element

package/dist/{ir-BFwWhj2s.d.mts → ir-D4S9R816.d.mts}

@@ -454,7 +454,7 @@ type MutationApplied = {
  * type can change without breaking a live consumer, so the fix is an
  * accessor that is correct on both.
  */
-declare function mutationId(m: string | MutationApplied): string;
+declare function mutationId(m: string | MutationApplied | null | undefined): string | undefined;
 /**
  * alpha.78 — does any mutation in the list match `idOrPrefix` (exact id, or
  * prefix when it ends with `*`)? Works on both `mutationsApplied` element

package/dist/key-health.d.mts

@@ -86,6 +86,34 @@ interface KeyHealthConfig {
     /** Per-provider probe timeout in ms. Default 3000. */
     timeoutMs?: number;
 }
+/**
+ * alpha.81 — a NON-REVERSIBLE identity for a provider key, so the fleet can
+ * answer "are two consumers on the same key?" without any consumer, or the
+ * brain, ever holding a key value.
+ *
+ * Origin: PB's `one-shared-provider-key-across-four-consumers` (s83). All four
+ * provider keys are Vercel team-level Shared Env Vars across four projects, so
+ * one exhausted account is a four-consumer outage that each consumer diagnoses
+ * locally as its own, and provider spend is a single undifferentiated number.
+ * PB's observation that only kgauto can see this is correct: the library runs
+ * inside every consumer's process and resolves the key there; no consumer can
+ * compare its key against a peer's.
+ *
+ * **Why truncation is the safety property, not an optimization.** The digest is
+ * cut to 12 hex chars (48 bits) — enough that a collision between the handful
+ * of keys in one portfolio is negligible, far too little to verify a guessed
+ * key against. Provider keys are high-entropy random strings, so even the full
+ * digest would not be brute-forceable; the truncation means the stored value is
+ * not a verification oracle even if the key space were later reduced. The
+ * domain-separation prefix keeps these digests useless against any hash
+ * computed for another purpose.
+ *
+ * Never log, return, or persist the key itself. This function is the only
+ * sanctioned way a key becomes a value that may leave the process.
+ */
+declare const KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+declare const KEY_FINGERPRINT_LENGTH = 12;
+declare function keyFingerprint(key: string): Promise<string | undefined>;
 interface KeyHealthResult {
     provider: KeyHealthProvider;
     /** Canonical env var name probed (the resolved one for Google). */
@@ -102,6 +130,13 @@ interface KeyHealthResult {
     balance_usd?: number;
     /** Failure class when valid is null with a probe attempted (e.g. 'timeout', 'http_500') or 'key_absent'. */
     detail?: string;
+    /**
+     * alpha.81 — truncated, domain-separated SHA-256 of the resolved key. NEVER
+     * the key. Identical values across two consumers mean they resolve the same
+     * credential; that is the only question it can answer. Absent when the key is
+     * absent or the runtime exposes no WebCrypto. See {@link keyFingerprint}.
+     */
+    key_fingerprint?: string;
 }
 interface KeyHealthResponseBody {
     app_id: string;
@@ -128,4 +163,4 @@ interface KeyHealthRoute {
  */
 declare function createKeyHealthRoute(config: KeyHealthConfig): KeyHealthRoute;
 
-export { type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute };
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute, keyFingerprint };

package/dist/key-health.d.ts

@@ -86,6 +86,34 @@ interface KeyHealthConfig {
     /** Per-provider probe timeout in ms. Default 3000. */
     timeoutMs?: number;
 }
+/**
+ * alpha.81 — a NON-REVERSIBLE identity for a provider key, so the fleet can
+ * answer "are two consumers on the same key?" without any consumer, or the
+ * brain, ever holding a key value.
+ *
+ * Origin: PB's `one-shared-provider-key-across-four-consumers` (s83). All four
+ * provider keys are Vercel team-level Shared Env Vars across four projects, so
+ * one exhausted account is a four-consumer outage that each consumer diagnoses
+ * locally as its own, and provider spend is a single undifferentiated number.
+ * PB's observation that only kgauto can see this is correct: the library runs
+ * inside every consumer's process and resolves the key there; no consumer can
+ * compare its key against a peer's.
+ *
+ * **Why truncation is the safety property, not an optimization.** The digest is
+ * cut to 12 hex chars (48 bits) — enough that a collision between the handful
+ * of keys in one portfolio is negligible, far too little to verify a guessed
+ * key against. Provider keys are high-entropy random strings, so even the full
+ * digest would not be brute-forceable; the truncation means the stored value is
+ * not a verification oracle even if the key space were later reduced. The
+ * domain-separation prefix keeps these digests useless against any hash
+ * computed for another purpose.
+ *
+ * Never log, return, or persist the key itself. This function is the only
+ * sanctioned way a key becomes a value that may leave the process.
+ */
+declare const KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+declare const KEY_FINGERPRINT_LENGTH = 12;
+declare function keyFingerprint(key: string): Promise<string | undefined>;
 interface KeyHealthResult {
     provider: KeyHealthProvider;
     /** Canonical env var name probed (the resolved one for Google). */
@@ -102,6 +130,13 @@ interface KeyHealthResult {
     balance_usd?: number;
     /** Failure class when valid is null with a probe attempted (e.g. 'timeout', 'http_500') or 'key_absent'. */
     detail?: string;
+    /**
+     * alpha.81 — truncated, domain-separated SHA-256 of the resolved key. NEVER
+     * the key. Identical values across two consumers mean they resolve the same
+     * credential; that is the only question it can answer. Absent when the key is
+     * absent or the runtime exposes no WebCrypto. See {@link keyFingerprint}.
+     */
+    key_fingerprint?: string;
 }
 interface KeyHealthResponseBody {
     app_id: string;
@@ -128,4 +163,4 @@ interface KeyHealthRoute {
  */
 declare function createKeyHealthRoute(config: KeyHealthConfig): KeyHealthRoute;
 
-export { type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute };
+export { KEY_FINGERPRINT_DOMAIN, KEY_FINGERPRINT_LENGTH, type KeyHealthConfig, type KeyHealthProvider, type KeyHealthResponseBody, type KeyHealthResult, type KeyHealthRoute, createKeyHealthRoute, keyFingerprint };

package/dist/key-health.js

@@ -20,15 +20,29 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/key-health.ts
 var key_health_exports = {};
 __export(key_health_exports, {
-  createKeyHealthRoute: () => createKeyHealthRoute
+  KEY_FINGERPRINT_DOMAIN: () => KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH: () => KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute: () => createKeyHealthRoute,
+  keyFingerprint: () => keyFingerprint
 });
 module.exports = __toCommonJS(key_health_exports);
 
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.80";
+var LIBRARY_VERSION = "2.0.0-alpha.82";
 
 // src/key-health.ts
 var JSON_HEADERS = { "Content-Type": "application/json" };
+var KEY_FINGERPRINT_DOMAIN = "kgauto-key-fingerprint-v1:";
+var KEY_FINGERPRINT_LENGTH = 12;
+async function keyFingerprint(key) {
+  const trimmed = key?.trim();
+  if (!trimmed) return void 0;
+  const subtle = globalThis.crypto?.subtle;
+  if (!subtle) return void 0;
+  const bytes = new TextEncoder().encode(KEY_FINGERPRINT_DOMAIN + trimmed);
+  const digest = await subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("").slice(0, KEY_FINGERPRINT_LENGTH);
+}
 function jsonResponse(status, body) {
   return new Response(JSON.stringify(body), { status, headers: JSON_HEADERS });
 }
@@ -130,11 +144,13 @@ function createKeyHealthRoute(config) {
         detail: "key_absent"
       };
     }
+    const fingerprint = await keyFingerprint(key);
     const base = {
       provider: spec.provider,
       env: envName,
       present: true,
-      valid: null
+      valid: null,
+      ...fingerprint ? { key_fingerprint: fingerprint } : {}
     };
     const { url, headers } = spec.buildRequest(key);
     const started = Date.now();
@@ -224,5 +240,8 @@ function createKeyHealthRoute(config) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
-  createKeyHealthRoute
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute,
+  keyFingerprint
 });

package/dist/key-health.mjs

@@ -1,6 +1,12 @@
 import {
-  createKeyHealthRoute
-} from "./chunk-CIBHU67M.mjs";
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute,
+  keyFingerprint
+} from "./chunk-L246YOV7.mjs";
 export {
-  createKeyHealthRoute
+  KEY_FINGERPRINT_DOMAIN,
+  KEY_FINGERPRINT_LENGTH,
+  createKeyHealthRoute,
+  keyFingerprint
 };

package/dist/profiles.d.mts

@@ -1,4 +1,4 @@
-import { k as Provider } from './ir-BFwWhj2s.mjs';
+import { k as Provider } from './ir-D4S9R816.mjs';
 import { IntentArchetypeName } from './dialect.mjs';
 
 /**

package/dist/profiles.d.ts

@@ -1,4 +1,4 @@
-import { k as Provider } from './ir-DZKS1tI7.js';
+import { k as Provider } from './ir-Cx9hJj0B.js';
 import { IntentArchetypeName } from './dialect.js';
 
 /**

package/dist/{types-B4kz3Vs0.d.ts → types-CAs9-0S4.d.ts}

@@ -1,4 +1,4 @@
-import { s as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, m as CallAttempt } from './ir-DZKS1tI7.js';
+import { s as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, m as CallAttempt } from './ir-Cx9hJj0B.js';
 
 /**
  * Glass-Box observability types (alpha.17).

package/dist/{types-DpcAMmk-.d.mts → types-CRXaR7nJ.d.mts}

@@ -1,4 +1,4 @@
-import { s as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, m as CallAttempt } from './ir-BFwWhj2s.mjs';
+import { s as MutationApplied, B as BestPracticeAdvisory, F as FallbackReason, m as CallAttempt } from './ir-D4S9R816.mjs';
 
 /**
  * Glass-Box observability types (alpha.17).

package/dist/{types-D_fLt_Xv.d.ts → types-Cvd6kRNv.d.ts}

@@ -1,4 +1,4 @@
-import { i as Adapter, F as FallbackReason, x as SectionKind } from './ir-DZKS1tI7.js';
+import { i as Adapter, F as FallbackReason, x as SectionKind } from './ir-Cx9hJj0B.js';
 
 /**
  * Wire contract for the Glass-Box Chrome extension's brain-poll endpoint.

package/dist/{types-hjzSWxtv.d.mts → types-DHi4FcUu.d.mts}

@@ -1,4 +1,4 @@
-import { i as Adapter, F as FallbackReason, x as SectionKind } from './ir-BFwWhj2s.mjs';
+import { i as Adapter, F as FallbackReason, x as SectionKind } from './ir-D4S9R816.mjs';
 
 /**
  * Wire contract for the Glass-Box Chrome extension's brain-poll endpoint.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmdrift/kgauto-compiler",
-  "version": "2.0.0-alpha.80",
+  "version": "2.0.0-alpha.82",
   "description": "Prompt compiler with executable provider knowledge for multi-model AI apps: normalized multi-provider transport with fallback chains, compile-time cliff guards, a curated model registry, and a telemetry flight recorder. Swap models without rewriting prompts.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",
@@ -60,6 +60,7 @@
     "build": "tsup src/index.ts src/dialect.ts src/profiles.ts src/brain-proxy.ts src/key-health.ts src/glassbox/index.ts src/glassbox-routes/index.ts src/glassbox-routes/format.ts src/glassbox-routes/react/index.ts --format cjs,esm --dts --clean --external react --external react-dom",
     "test": "vitest run",
     "test:watch": "vitest",
+    "test:stress": "node scripts/stress-test.mjs",
     "typecheck": "tsc --noEmit",
     "prepublishOnly": "npm run typecheck && npm run test && npm run build"
   },